Analysis Summary

CVE-2025-1333 CVSS:6

IBM MQ Container, when used with the IBM MQ Operator LTS, MQ Operator CD, and MQ Operator and configured with Cloud Pak for Integration Keycloak, could allow a remote attacker to obtain sensitive information.

CVE-2025-27365 CVSS:6.5

IBM MQ Operator is vulnerable to a denial of service, caused by a use-after-free error. By connecting the client to a MQ Queue Manager, an attacker could cause a SIGSEGV in the AMQRMPPA channel process terminating it.

Impact

• Information Disclosure
• Denial of Service

Indicators of Compromise

CVE

• CVE-2025-1333

• CVE-2025-27365

Affected Vendors

Remediation

Refer to IBM Security Advisory for patch, upgrade, or suggested workaround information.

IBM Security Advisory